Enable UFW; add more pkgs; diff encrypted pass per user; add backports by def; add more sysctls; install docker; auto-configure borg, tailscale

host_vars/in/healthchecks.yaml

@@ -1,11 +1,14 @@
 $ANSIBLE_VAULT;1.1;AES256
-38626431346431393962623738643565313736393130653265373038393538633431333634376134
-3733626230643163366565333763626536633666373466300a616337623935326538363866643465
-32663835333930393631623836633865393938353331396164623465326233363034303965393133
-6165633030366266330a643339626531303766383366663065353239346139663730663539653034
-38363266393734376139396638356264326166343964323065373732626134643133386330653233
-63336663366165643561356131336566393532393537303235663866353261343033616530353839
-38656536306561613237386339663636633036386438326162653863363139393862356434353463
-34313135643736663564626666643030646561363037383536656661316564356133396535613137
-34633763306139613363616366343062613730353938373465373135636230316236643365393764
-6461333665333538303466336363376435363966393538663265
+39306635373466386133306563356330636363653032313836366462633664386133313637656562
+3838393830616131333135633935613762643364323536390a383564333933323066353635393939
+34626435363936303839373166336533383936643731333934626632626634653634333931646261
+6235613466356239640a323039623039623335613763663730303161373362393264393138363565
+31353033303434343937646433386531356363613263653736356531303564326134656334653037
+61613436366163333933386633366165356235313763653334633830323636303334616432323163
+62323262373264383939313464626431626366343339373137626365313962383735383764633632
+39343561306663366438353233636162373961323264386563353231626364356536396164363730
+64663338623365326161333336336534373933346136336538646636653734383164366266633233
+35363462663938366262626461363535343266653739366430646535313865663263363137333138
+32383236326565656538653339666432346237313363653761396430333236363331393763393931
+65353539646464386435633830663933363265663734623464323964386238386535303834653532
+6666

host_vars/in/misc.yaml

@@ -0,0 +1,31 @@
+---
+bkp_source_directories:
+  - /var
+  - /home
+  - /boot
+  - /usr
+  - /root
+  - /opt
+  - /zfspool
+  - /etc
+bkp_exclude_patterns:
+  - /var/log
+  - /var/lib/docker/buildkit
+  - /var/lib/docker/containers
+  - /var/lib/docker/image
+  - /var/lib/docker/overlay2
+  - /var/lib/docker/plugins
+  - /var/lib/docker/runtimes
+  - /var/lib/docker/swarm
+  - /var/lib/docker/tmp
+  - /var/lib/docker/trust
+  - /var/lib/postgresql
+bkp_postgresql_databases:
+  - name: gitea
+  - name: healthchecks
+  - name: hedgedoc
+  - name: semaphore
+  - name: vaultwarden
+  - name: ejabberd
+  - name: mailu
+  - name: roundcube